美国政府对PKI应用的最新变动.ppt

VeriSign Confidential Latest update of US Government PKI Adoption Agenda Snapshot of PKI adoption by the U.S. Government Federal PKI Architecture Important U.S. Programs Federal Bridge Certification Authority (FBCA) Shared Service Provider (SSP) External Certification Authority (ECA) Certificate Validation A few notes about encryption Hash Crypto Suite VeriSign Worldwide Government Program Status of Federal PKI (historic – 2003 GAO report) PKI can provide greater security assurances than passwords. 20 of the 24 Federal agencies reported a total of 89 PKI initiatives. Investment of $1 billion. Challenges Identified FBCA and ACES programs have seen mixed progress and results. Office of Management and Budget (OMB) to address challenges memorandum in July 2003 steps for consolidating investments related to authentication and identity Departments and Agencies – Adoption Matrix (2003) Federal PKI Architecture Components FBCA FCPF/SSP E-Governance C4 FBCA – Federal Bridge CA :Overview The FBCA facilitates an entity accepting certificates issued by another entity for a transaction. non-hierarchical hub allowing the "relying party" entity to create a certificate trust path from its domain back to the domain of the entity that issued the certificate. Feature and functionalities: The FPKIA enabling policy CAs are the: (1) FBCA (2) Federal PKI Common Policy Framework (FCPF) CA (3) Citizen and Commerce Class Common (C4) CA. The evolved operation also incorporates the e-Governance Certificate Authorities used to issue SSL/TLS certificates supporting assertion-based credentials for Security Assertion Markup Language (SAML) data exchanges. Barrier & Difficulties to implement FBCA Only few Govt. Agencies CA are licensed under FBCA NASA USDA/National Finance Center Department of Defense Department of the Treasury Department of State Department of Energy US Patent & Trademark Department of Homeland Security Challenges Cost: it is expensive to setup